AIM: AI Incidents and Hazards Monitor

The event involves AI systems or AI-enabled tools used maliciously in cyberattacks that have directly led to harms: physical risk from overheating refrigerators (harm to property and potential injury), disruption of emergency alert systems (disruption of critical infrastructure and harm to communities), and large-scale theft in cryptocurrency exchanges. The article explicitly mentions AI's role in intensifying these threats and enabling attackers to exploit vulnerabilities more efficiently. The harms are realized and ongoing, not merely potential. Hence, the event meets the criteria for an AI Incident rather than a hazard or complementary information.[AI generated]

The article explicitly mentions AI-supported autonomous drone flights and the legal framework enabling their operation, indicating the presence of AI systems. No actual harm or incident is reported, so it is not an AI Incident. The event is not merely general AI news or a beneficial use countering external harm, but rather the creation of a system that could plausibly lead to harm if malfunctions or failures occur. Hence, it fits the definition of an AI Hazard.[AI generated]

The article explicitly describes AI systems being used to create and accelerate cyberattacks, including phishing, ransomware, and malware, which have directly led to harm such as data breaches and security incidents affecting organizations worldwide. The harms include violations of privacy and security, which fall under harm to communities and potentially violations of rights. The AI systems are central to these harms, as they enable more effective and widespread attacks. This meets the criteria for an AI Incident because the AI's use has directly led to realized harm. The article does not merely warn of potential harm (which would be a hazard) nor does it focus on responses or updates (which would be complementary information).[AI generated]

The AI music generator app is explicitly described as using AI to generate music imitating specific artists without permission, which constitutes unauthorized use of copyrighted material and likeness. This directly implicates violations of intellectual property rights and possibly other legal rights, which are harms under the AI Incident definition. The involvement of AI in generating the infringing content is clear, and the lawsuits represent direct consequences of the AI system's use. Although the case is ongoing and allegations are not yet proven, the event describes an AI Incident because the harm (copyright infringement and rights violations) is alleged to have already occurred due to the AI system's outputs.[AI generated]

The article does not describe a realized harm caused directly or indirectly by AI systems but highlights credible concerns and early indicators of potential future harm related to AI-driven job displacement and environmental burdens from data centers. It also mentions legislative actions aimed at regulating AI infrastructure. Since the harms are plausible and potential rather than actualized, and the article centers on warnings and policy responses, this fits the definition of an AI Hazard rather than an AI Incident or Complementary Information.[AI generated]

The article explicitly mentions the integration of hundreds of unmanned aerial vehicles and the use of artificial intelligence in future operational concepts, such as collaborative combat aircraft and decision-making systems. While no harm has occurred yet, the development and deployment of AI-enabled military drones and autonomous systems inherently carry plausible risks of harm, including escalation of military conflicts or accidental engagements. The event is not an AI Incident because no harm has materialized, nor is it Complementary Information or Beneficial Use, as it is not about responding to external harm but about military capability development. Hence, it fits the definition of an AI Hazard.[AI generated]

The article explicitly mentions the use of an AI-supported program to conduct illegal gambling activities, which is a breach of legal obligations and harms communities. The AI system's involvement is central to the illegal operation, and the law enforcement response confirms the harm has materialized. Hence, this qualifies as an AI Incident due to the direct link between the AI system's use and the illegal, harmful activity.[AI generated]

The event involves the use of AI to generate fake explicit photographs of children, which are then used to blackmail and coerce real children into sending actual photos. This constitutes direct harm to the mental health and rights of children, fulfilling the criteria for an AI Incident. The AI system's role is pivotal in producing the harmful content that leads to psychological and sexual exploitation harms. Therefore, this event is classified as an AI Incident.[AI generated]

The event involves the use of an AI system (deepfake technology) to generate synthetic video and audio impersonating a real person without consent. This AI-generated content is used to perpetrate a financial scam, causing harm to individuals who are defrauded. The harm is realized (people have lost money), and the AI system's role is pivotal in enabling the scam. Therefore, this qualifies as an AI Incident due to the direct link between AI misuse and harm to people (financial injury).[AI generated]

The article explicitly mentions AI applications used for mushroom identification, which rely on visual similarity but cannot detect toxins, thus posing a risk of fatal poisoning if trusted. This fits the definition of an AI Hazard, as the AI system's use could plausibly lead to harm (injury or death from poisoning). There is no indication that harm has already occurred due to AI use, so it is not an AI Incident. The warning is a preventive advisory from a health authority, not a report of an incident or a complementary information update. Therefore, the event is best classified as an AI Hazard.[AI generated]

Claude Code is an AI coding assistant, thus an AI system. The 'Don't Ask Again' feature causes credential-bearing commands to be saved in configuration files that are then exposed publicly on GitHub, leading to the direct exposure of secrets. This exposure is a direct harm related to the AI system's use and configuration, causing security breaches and violations of confidentiality. Therefore, this event qualifies as an AI Incident due to realized harm caused by the AI system's malfunction or misuse leading to exposure of sensitive data.[AI generated]

The event involves AI systems (advanced AI models used by attackers to find vulnerabilities) whose use is making cyberattacks faster and more effective, thus increasing the risk of harm to organizations' digital assets and operations. While no specific AI-driven cyberattack incident with realized harm is described, the article highlights a credible and escalating threat that could plausibly lead to significant harm if not addressed. Therefore, this qualifies as an AI Hazard because it describes a circumstance where AI's development and use could plausibly lead to an AI Incident involving harm to property, organizations, and potentially communities through cybersecurity breaches.[AI generated]

The event involves the use of OpenAI's AI systems (ChatGPT and API services) and the enforcement of policies that led to large-scale account bans. These bans have directly harmed users by removing access to their accounts and data, which is a form of harm to property and user rights. The AI system's role is pivotal as the bans are a result of AI usage policy enforcement and detection of misuse or violations related to AI system access. The harm is realized and ongoing, not merely potential, thus classifying this as an AI Incident.[AI generated]

The event involves the use and export of an AI system (NVIDIA's H200 AI chip) to Chinese companies that may be front companies linked to sanctioned military entities. The article does not report any direct or indirect realized harm caused by the AI system but raises credible concerns about potential misuse leading to military or security harms. This fits the definition of an AI Hazard, where the AI system's use could plausibly lead to harm. The article also includes responses from regulators and NVIDIA, indicating ongoing governance and oversight efforts, but no confirmed incident of harm. Hence, the classification as AI Hazard is appropriate.[AI generated]

The article explicitly involves AI systems (AI agents) that can access and perform financial transactions on customer accounts. The banks' preventive restrictions and regulatory efforts indicate recognition of plausible future harm from unauthorized or uncontrolled AI agent access, such as large-scale unauthorized fund transfers and financial instability. Since no actual unauthorized access or harm has occurred yet, but the risk is credible and recognized, this qualifies as an AI Hazard rather than an AI Incident. The article is not primarily about a response to a past incident, so it is not Complementary Information. It is not unrelated or beneficial use, as the AI agents are the potential source of harm, not solely beneficial countermeasures.[AI generated]

The article explicitly mentions the use of deepfake technology, an AI system, to create false sexual images that have been disseminated online, causing reputational and personal harm. This meets the criteria for an AI Incident because the AI system's use has directly led to violations of rights and harm to individuals. The event is not merely a potential risk but an actual occurrence of harm. Therefore, the classification is AI Incident.[AI generated]

The autonomous vehicle is an AI system involved in real-time decision-making and navigation. The near-miss incident shows a malfunction or failure to act appropriately (not stopping at a pedestrian crossing despite green lights for the pedestrian), which could plausibly have led to injury. Since no actual harm occurred, it is not an AI Incident but an AI Hazard. The event is not merely general news or a beneficial use, and it is not a complementary information update since the main focus is the near-accident itself.[AI generated]

The event explicitly involves deepfake videos, which are AI-generated manipulated content, used to threaten and extort a person. The use of AI-generated deepfakes directly led to harm in the form of extortion, threats to personal safety, and potential reputational damage. The involvement of AI in the creation and circulation of these videos is clear, and the harm is realized, not just potential. Hence, this is an AI Incident as per the definitions provided.[AI generated]

The event involves AI-generated content that has been used to create defamatory videos harming the personal dignity and image of a public figure, the Chief Minister. This harm is recognized by the court as crossing the boundary of acceptable political criticism and constitutes a violation of rights and reputational harm. Since the AI system's use directly led to this harm, this qualifies as an AI Incident under the framework, specifically under violations of human rights or breach of obligations protecting fundamental rights (personal dignity and reputation).[AI generated]

The article explicitly mentions AI and automated tools being used by threat actors to identify vulnerabilities and conduct cyberattacks, which could disrupt critical infrastructure and financial services. However, it clarifies that AI involvement in recent incidents has not been confirmed, indicating no realized harm yet. The advisory focuses on plausible future harms from AI-enabled cyber threats, fitting the definition of an AI Hazard. The presence of AI systems is reasonably inferred from the description of automated bots and agentic tools used for sophisticated attacks. The event does not describe an actual AI Incident or a beneficial use, nor is it merely complementary information or unrelated news.[AI generated]